ALT-PU-2026-1576

Критический

ALT-PU-2026-1576: package tomcat10 update to version 10.1.47-alt0.1_jvm17.p11

Источник

errata.altlinux.org

Дата публикации

02.02.2026

Дата обновления

05.11.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades tomcat10 to version 10.1.47-alt0.1_jvm17.p11.

Устраненные уязвимости42

BDU:2024-06407

Высокий 7.5

Дата публикации: 23.08.2024

Уязвимость компонента HTTP2 Stream Handler сервера приложений Apache Tomcat, позволяющая нарушителю вызвать отказ в обслуживании

CVSS 3.1

Высокий 7.5

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Высокий 7.8

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Complete

Ссылки

BDU:2024-06407 https://bdu.fstec.ru/vul/2024-06407

Ссылки22

ALT-PU-2026-1576 https://errata.altlinux.org/ALT-PU-2026-1576

GHSA-23hv-mwm6-g8jf

https://github.com/advisories/GHSA-23hv-mwm6-g8jf

GHSA-25xr-qj8w-c4vf

https://github.com/advisories/GHSA-25xr-qj8w-c4vf

GHSA-27hp-xhwr-wr2m

https://github.com/advisories/GHSA-27hp-xhwr-wr2m

GHSA-3p2h-wqq4-wf4h

https://github.com/advisories/GHSA-3p2h-wqq4-wf4h

GHSA-42wg-hm62-jcwg

https://github.com/advisories/GHSA-42wg-hm62-jcwg

GHSA-5j33-cvvr-w245

https://github.com/advisories/GHSA-5j33-cvvr-w245

GHSA-653p-vg55-5652

https://github.com/advisories/GHSA-653p-vg55-5652

GHSA-7895-gffq-w6jq

https://github.com/advisories/GHSA-7895-gffq-w6jq

GHSA-7jqf-v358-p8g7

https://github.com/advisories/GHSA-7jqf-v358-p8g7

GHSA-83qj-6fr2-vhqg

https://github.com/advisories/GHSA-83qj-6fr2-vhqg

GHSA-ff77-26x5-69cr

https://github.com/advisories/GHSA-ff77-26x5-69cr

GHSA-gqp3-2cvr-x8m3

https://github.com/advisories/GHSA-gqp3-2cvr-x8m3

GHSA-h2fw-rfh5-95r3

https://github.com/advisories/GHSA-h2fw-rfh5-95r3

GHSA-h3gc-qfqq-6h8f

https://github.com/advisories/GHSA-h3gc-qfqq-6h8f

GHSA-hgrr-935x-pq79

https://github.com/advisories/GHSA-hgrr-935x-pq79

GHSA-vfww-5hm6-hx2j

https://github.com/advisories/GHSA-vfww-5hm6-hx2j

GHSA-wc4r-xq3c-5cf3

https://github.com/advisories/GHSA-wc4r-xq3c-5cf3

GHSA-wm9w-rjj3-j356

https://github.com/advisories/GHSA-wm9w-rjj3-j356

GHSA-wmwf-9ccg-fff5

https://github.com/advisories/GHSA-wmwf-9ccg-fff5

GHSA-wr62-c79q-cv37

https://github.com/advisories/GHSA-wr62-c79q-cv37

GHSA-xcpr-7mr4-h4xq

https://github.com/advisories/GHSA-xcpr-7mr4-h4xq

Связанные уязвимости

ALT-PU-2025-1726

CVSS3: 9.8

altlinux

почти 2 года назад

ALT-PU-2025-1726: package `tomcat` update to version 9.0.98-alt1_1jpp11

SUSE-SU-2026:1058-1

suse-cvrf

8 месяцев назад

Security update for tomcat

ALT-PU-2025-2379

CVSS3: 9.8

altlinux

больше 1 года назад

ALT-PU-2025-2379: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.1

ALT-PU-2025-13307

CVSS3: 9.8

altlinux

12 месяцев назад

ALT-PU-2025-13307: package `tomcat10` update to version 10.1.20-alt2_jvm17.p10.1

CVE-2024-34750

CVSS3: 7.5

ubuntu

больше 2 лет назад

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.